Static task
static1
Behavioral task
behavioral1
Sample
9c545e49126ee5faddef558bf8abe766.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9c545e49126ee5faddef558bf8abe766.dll
Resource
win10v2004-20231215-en
General
-
Target
9c545e49126ee5faddef558bf8abe766
-
Size
26KB
-
MD5
9c545e49126ee5faddef558bf8abe766
-
SHA1
e42439841a295b61b67953939cf4a4e5bc943c02
-
SHA256
fb3250ae103ee9a4b449a30717cd8e28a7a6acd3b4bd4b0eaf0cc33bf206f7a1
-
SHA512
2c2152272f11072c8a96834edd26dea9204b84ec64539e6051ef40b5974f9b5cea0d9217cee348cfbd402f714a7f3e1e2dcc05779bd7ff24e135bb162410c847
-
SSDEEP
768:7bhXJknaG6hr6x/jJQF/uTf1OaNjpEx1y:ZXJkaGUr62ur1OaNqx1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9c545e49126ee5faddef558bf8abe766
Files
-
9c545e49126ee5faddef558bf8abe766.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bidryd Size: 947B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE